Heap Out-Of-Bounds Read Vulnerability in libdisplay-info from Vendor Emersion

CVE-2026-112271

What is CVE-2026-112271?

The libdisplay-info library through version 0.4.0 contains a vulnerability that could allow an attacker to exploit a heap out-of-bounds read condition. This issue arises in the DisplayID v1 section parser when a data block's declared length exceeds its actual size. By supplying a specially crafted EDID from a malicious source, such as a monitor, KVM, capture device, or a specific EDID file, an attacker can trigger a read past the buffer, potentially resulting in application crashes and exploitation.

References